CN107733838A - A kind of mobile terminal client terminal identity identifying method, device and system - Google Patents

Abstract

The invention discloses a mobile terminal client identity authentication method, which includes: binding the user login account with the mobile terminal number; the method also includes: after receiving the login request, performing login information including the user login account and password Verify, after the verification is passed, obtain the mobile terminal number correspondingly bound to the user login account; detect whether the information sent by the mobile terminal number is a random code, and determine whether to allow the user to log in according to the detection result; wherein, The random code is generated according to the login information. The invention also discloses a mobile terminal client identity authentication device and system at the same time.

Description

A mobile terminal client identity authentication method, device and system

technical field

The invention relates to business support and information security management technology in the communication field, in particular to a mobile terminal client identity authentication method, device and system.

Background technique

In recent years, with the rapid development of mobile Internet technology, various mobile terminal applications, such as mobile phone applications, have become more and more popular in work and life. At present, most mobile phone applications use a static password combined with a dynamic verification code to log in. However, the dynamic verification code is not safe and convenient enough. Therefore, the security verification of user information is particularly important.

In order to ensure the security of user information, at present, some relevant patent documents have proposed solutions. For example, the patent No. 200910236953.7 discloses a mobile terminal user authentication method and system. The mobile phone number of the terminal user sets the authentication serial number group respectively, and compares the authentication serial number corresponding to the user account and the mobile phone number during authentication and authentication, so as to realize user authentication and subsequent authentication; the patent disclosure of the patent number 201110092438.3 Provided are a mobile banking client information authentication method, system, and mobile terminal, including: respectively establishing the binding relationship between mobile phone identity module (SIM) card information, mobile phone hardware information, and mobile banking registered customer information, and judging the identity of the logged-in mobile phone Whether the SIM card information and hardware information match the mobile phone SIM card information and hardware information in the corresponding binding relationship, if yes, the login information verification is passed, otherwise the login information verification fails; the patent No. 201210417594.7 discloses a A method for user identity authentication in a registration and/or login network application, comprising: the application system sends an invitation text message to the mobile phone number of the invitee, and the invitation text message contains an invitation code; , enter your own mobile phone number and invitation code; the application system judges whether the mobile phone number and invitation code are correct, if correct, allows login or registration, if incorrect, then refuses to log in or register.

However, although the above-mentioned several existing user authentication and authentication methods can solve the problem of user information security to a certain extent, they still have the following defects:

1) The patent No. 200910236953.7 uses account numbers and passwords for authentication, and there are security loopholes such as forging signatures and cracking passwords;

2) In the patent No. 201110092438.3, the hardware information of the user's mobile phone needs to be bundled, which is poor in portability and convenience, and needs to be re-registered after the user changes the terminal or SIM card; in addition, the hardware information may be cracked and tampered by others, and there are Certain potential safety hazards;

3) In the patent No. 201210417594.7, the user needs to input the issued invitation code, which is complicated and time-consuming. At the same time, the issued invitation code is easily intercepted by others through other means, which reduces the system security.

Contents of the invention

In view of this, the embodiments of the present invention expect to provide a mobile terminal client identity authentication method, device and system, aiming at reducing user operation steps, shortening authentication time, and improving user experience while ensuring user information security.

In order to achieve the above object, the technical solution of the embodiment of the present invention is achieved in this way:

An embodiment of the present invention provides a mobile terminal client identity authentication method, which binds a user login account with a mobile terminal number; the method further includes:

After receiving the login request, verify the login information including the user login account and password, and obtain the mobile terminal number correspondingly bound to the user login account after the verification is passed;

Detect whether the information sent by the mobile terminal number is a random code, and determine whether to allow the user to log in according to the detection result;

Wherein, the random code is generated according to the login information.

In the above solution, the random code is generated by the mobile terminal client according to the login information input by the user;

After generating the random code, the method further includes: sending, by the mobile terminal client, a login request whose content is the user login account and password to the server, and sending an information request whose content is the random code to a third-party device; The third-party device responds to the information request, and notifies the mobile terminal client to send information whose content is a random code to the server.

In the above solution, generating the random code includes: using a digital signature algorithm (DSA, Digital Signature Algorithm) to generate the random code, wherein the DSA is at least one of asymmetric encryption algorithms.

In the above solution, determining whether to allow the user to log in according to the detection result includes:

Monitor from the third-party device whether there is information that the content sent by the mobile terminal number correspondingly bound to the user login account is random code information, and if so, feed back the monitoring result to the mobile terminal client to determine the user's If the identity authentication is passed, the user is allowed to log in; otherwise, the monitoring result is fed back to the mobile terminal client to determine that the user's identity authentication has not passed, and the user is not allowed to log in.

An embodiment of the present invention provides an identity authentication device for a mobile terminal client. The device includes: an account number binding unit, a login information verification unit, a binding number acquisition unit, a random code information detection unit, and a user login determination unit; wherein,

The account number binding unit is used to bind the user login account with the mobile terminal number;

The login information verification unit is configured to verify the login information including the user login account number and password after receiving the login request;

The binding number obtaining unit is configured to obtain the mobile terminal number correspondingly bound to the user login account after the login information verification unit passes the verification;

The random code information detection unit is used to detect whether the information sent by the mobile terminal number is a random code;

The user login determination unit is configured to determine whether to allow user login according to the detection result of the random code information detection unit;

Wherein, the random code is generated according to the login information.

In the above solution, the device further includes: a random code generating unit, a login request sending unit, and a random code information sending unit; wherein,

The random code generation unit is used to generate a random code by the mobile terminal client according to the login information input by the user;

The login request sending unit is configured to send, by the mobile terminal client, a login request whose content is the user login account number and password to the server after the random code generation unit generates the random code;

The random code information sending unit is configured to send an information request containing a random code to a third-party device after the random code generating unit generates the random code; the third-party device responds to the information request and notifies the The mobile terminal client sends information containing random codes to the server.

In the above solution, the random code generating unit is specifically configured to: use DSA to generate a random code, wherein the DSA is at least one of asymmetric encryption algorithms.

In the above solution, the user login determination unit is specifically used for:

Monitor from the third-party device whether there is information that the content sent by the mobile terminal number correspondingly bound to the user login account is random code information, and if so, feed back the monitoring result to the mobile terminal client to determine the user's If the identity authentication is passed, the user is allowed to log in; otherwise, the monitoring result is fed back to the mobile terminal client to determine that the user's identity authentication has not passed, and the user is not allowed to log in.

The embodiment of the present invention also provides a mobile terminal client identity authentication system, the system includes: a mobile terminal client, a server, and a third-party device; wherein,

The mobile terminal client is used to generate a random code according to the login information input by the user; it is also used to send a login request whose content is the user login account and password to the server, and send an information request whose content is a random code to said third party device;

The server is configured to bind the user login account with the mobile terminal number; after receiving the login request, verify the login information including the user login account and password, and after the verification is passed, obtain the account corresponding to the user login account. Determine the mobile terminal number; detect whether the third-party device receives the information that the content sent by the mobile terminal number is a random code, and determine whether to allow the user to log in according to the detection result;

The third-party device is configured to respond to the information request, and notify the mobile terminal client to send information whose content is a random code to the server.

In the above solution, the mobile terminal client is specifically configured to: use DSA to generate a random code, wherein the DSA is at least one of asymmetric encryption algorithms.

The mobile terminal client identity authentication method, device and system provided by the embodiments of the present invention bind the user login account with the mobile terminal number; after receiving the login request, verify the login information including the user login account and password, and verify After passing through, obtain the mobile terminal number correspondingly bound to the user login account; detect whether the information sent by the mobile terminal number is a random code, and determine whether to allow the user to log in according to the detection result; wherein, the random code A code is generated based on the login information. The embodiment of the present invention only needs to establish the binding relationship between the mobile terminal number and the user login account, which improves the portability and convenience of the application program of the mobile terminal client; in addition, the identity authentication steps of the mobile terminal client are static verification and The combination of dynamic verification, that is: the use of double authentication; in this way, it can not only ensure that the mobile terminal client logged in by the user is consistent with the mobile terminal client used by the user to bind the mobile terminal number, but also solve security vulnerabilities such as forged signatures and password cracking , greatly improving the security of user information.

In addition, the embodiment of the present invention does not require the user to receive the invitation code, and the background gateway can automatically and intelligently complete the authentication of the user's login identity through a third-party device, reducing user operation steps, shortening the authentication time, and bringing better use to users. experience.

Description of drawings

FIG. 1 is a schematic diagram of the implementation process of a mobile terminal client identity authentication method according to an embodiment of the present invention;

FIG. 2 is a schematic diagram of a specific implementation process of a mobile terminal client identity authentication method according to an embodiment of the present invention;

3 is a schematic diagram of the composition and structure of a mobile terminal client identity authentication device according to an embodiment of the present invention;

FIG. 4 is a schematic diagram of the composition and structure of a mobile terminal client identity authentication system according to an embodiment of the present invention.

detailed description

In order to understand the characteristics and technical contents of the embodiments of the present invention in more detail, the implementation of the embodiments of the present invention will be described in detail below in conjunction with the accompanying drawings. The attached drawings are only for reference and description, and are not intended to limit the present invention.

As shown in Figure 1, the implementation process of the mobile terminal client identity authentication method in the embodiment of the present invention includes the following steps:

Step 101: Binding the user login account with the mobile terminal number;

Here, the user login account can be a user name, a personal mailbox, etc., and can also be an integrated circuit card identification code (ICCID, Integrate circuit card identity) of a global subscriber identification card (USIM, Universal Subscriber Identity Module) or an international mobile subscriber identification code (IMSI, International Mobile Subscriber Identification Number), International Mobile Equipment Identity (IMEI, International Mobile Equipment Identity), or mobile terminal serial number, etc., are used to uniquely identify a mobile subscriber in a certain mobile communication network.

Step 102: After receiving the login request, verify the login information including the user login account and password, and obtain the mobile terminal number correspondingly bound to the user login account after the verification is passed;

Here, the verification of the login information including the user login account number and password specifically includes:

Matching the login account number and password input by the user with the login account number and password stored in the database in advance, if the matching is successful, the verification of the login information is passed; otherwise, the verification of the login information fails.

It should be noted that the method for verifying the legitimacy of the user login account and password in this step belongs to static verification.

Step 103: Detect whether the information sent by the mobile terminal number is a random code, and determine whether to allow the user to log in according to the detection result; wherein, the random code is generated according to the login information.

Specifically, the random code is generated by the mobile terminal client according to the login information input by the user.

After generating the random code, the method further includes: sending, by the mobile terminal client, a login request whose content is the user login account and password to the server, and sending an information request whose content is the random code to a third-party device; The third-party device responds to the information request, and notifies the mobile terminal client to send information whose content is a random code to the server.

Here, the generation of random codes includes: using DSA to generate random codes, wherein DSA is generally used for digital signatures and authentication, and is at least one of asymmetric encryption algorithms; the security of DSA is based on the integer finite field discrete logarithm problem Yes, under the premise of the same key length, the security of DSA is equivalent to that of the RSA encryption algorithm. In DSA digital signature and authentication, the sender uses his own private key to sign a file or message, and the receiver uses the sender's public key to verify the authenticity of the signature after receiving the message.

Wherein, the random code is the information content sent by the mobile terminal number carried by the mobile terminal client and correspondingly bound to the user login account; the information can be sent by calling a mobile terminal such as a mobile phone SMS gateway to send a service to Sending in the form of short messages can also be sent in the form of MMS by calling the multimedia gateway sending service, and can also be sent in the form of WeChat by calling the WeChat gateway sending service, etc., which are not specifically limited here. Therefore, the sending form of the random code in the embodiment of the present invention is more flexible, which brings different user experiences to users. In this way, it can not only ensure that the mobile terminal client logged in by the user is consistent with the mobile terminal client used by the user to bind the mobile terminal number , It also solves security loopholes such as forging signatures and cracking passwords.

Here, specifically how to use the DSA to generate the random code belongs to the prior art, and will not be repeated here.

Here, the determining whether to allow the user to log in according to the detection result specifically includes:

Monitor from the third-party device whether there is information that the content sent by the mobile terminal number correspondingly bound to the user login account is random code information, and if so, feed back the monitoring result to the mobile terminal client to determine the user's If the identity authentication is passed, the user is allowed to log in; otherwise, the monitoring result is fed back to the mobile terminal client to determine that the user's identity authentication has not passed, and the user is not allowed to log in.

It should be noted that in this step, the method of detecting whether the third-party device has received the information that the content of the mobile terminal number is a random code is dynamic verification. The combination method of static verification and dynamic verification of the present invention, that is, adopts double authentication to automatically complete the authentication of the user login identity of the mobile terminal client, without requiring the mobile terminal client to receive the invitation code, reducing the user's The operation steps shorten the authentication time and improve the security of user information.

Taking the mobile client client user login verification as an example below, in conjunction with Fig. 2, the specific implementation process of the mobile terminal client identity authentication method provided by the present invention is further introduced in detail:

The implementation scheme of the embodiment of the present invention is completed by the interaction between the server and the mobile phone client.

As shown in Figure 2, the specific implementation process of the mobile terminal client identity authentication method in the embodiment of the present invention includes the following steps:

Step 201: pre-binding the user login account with the mobile phone number Y on the server side;

Step 202: Use DSA to generate a unique random code X according to the login account number and password input by the user on the mobile phone client;

Wherein, the random code X may be a random character string, and the random character string includes any letters and/or numbers in the user login account and password.

Step 203: The client sends the user's login account, password, and random code X to the server, and submits a login request according to the user's login account and password; at the same time, the mobile client calls the mobile phone SMS gateway sending service, and sends a message containing a random code X's SMS to the fixed port of the gateway;

Here, the random code X is information that the content of the short message sent by the mobile phone number Y carried by the mobile phone client is a random character string X.

Step 204: After receiving the login request, the server verifies the legitimacy of the user's login account and password, and obtains the mobile phone number Y corresponding to the user's login account after the verification is passed;

Here, the verification of the legitimacy of the user login account and password specifically includes:

Matching the login account number and password input by the user with the login account number and password stored in the database in advance, if the matching is successful, it indicates that the login account number and password input by the user are legal, and the login information verification is passed; otherwise, It indicates that the login account number and password input by the user are illegal, and the verification of the login information fails.

Step 205: the server inquires whether there is an uplink text message whose content is X sent by the mobile phone number Y in the database at the background of the SMS gateway;

Step 206: After the verification process is completed, the server sends the identity verification result to the mobile client, and the mobile client confirms the legitimacy of the user's identity according to the feedback verification result to decide whether to allow the user to log in.

Specifically, if both the login information and the gateway SMS verification pass, the passed verification result is fed back to the mobile client, and the mobile client allows the user to log in after receiving the verification result; otherwise, the user is not allowed to log in.

In order to realize the above method, the embodiment of the present invention also provides a mobile terminal client identity authentication device, as shown in Figure 3, the device includes an account number binding unit 301, a login information verification unit 302, a binding number acquisition unit 303 , a random code information detection unit 304, a user login determination unit 305; wherein,

The account number binding unit 301 is used to bind the user login account with the mobile terminal number;

The login information verification unit 302 is configured to verify the login information including the user login account and password after receiving the login request;

The binding number obtaining unit 303 is configured to obtain the mobile terminal number correspondingly bound to the user login account after the login information verification unit 302 passes the verification;

The random code information detection unit 304 is used to detect whether the content sent by the mobile terminal number is random code information;

The user login determination unit 305 is configured to determine whether to allow user login according to the detection result of the random code information detection unit 304;

Wherein, the random code is generated according to the login information.

Here, the device further includes: a random code generating unit 306, a login request sending unit 307, and a random code information sending unit 308; wherein,

The random code generation unit 306 is configured to generate a random code by the mobile terminal client according to the login information input by the user;

The login request sending unit 307 is configured to send a login request whose content is the user login account number and password to the server by the mobile terminal client after the random code generation unit 306 generates a random code;

The random code information sending unit 308 is configured to send an information request whose content is a random code to a third-party device after the random code generation unit 306 generates the random code; the third-party device responds to the information request and notifies The mobile terminal client sends information containing random codes to the server.

Wherein, the random code generation unit 306 is specifically configured to: use DSA to generate a random code, wherein the DSA is at least one of asymmetric encryption algorithms.

The login information verification unit 302 is specifically used for:

Matching the login account number and password input by the user with the login account number and password stored in the database in advance, if the matching is successful, the verification of the login information is passed; otherwise, the verification of the login information fails.

The user login determination unit 305 is specifically used for:

Monitor from the third-party device whether there is information that the content sent by the mobile terminal number correspondingly bound to the user login account is random code information, and if so, feed back the monitoring result to the mobile terminal client to determine the user's If the identity authentication is passed, the user is allowed to log in; otherwise, the monitoring result is fed back to the mobile terminal client to determine that the user's identity authentication has not passed, and the user is not allowed to log in.

In practical applications, the account number binding unit 301, login information verification unit 302, binding number acquisition unit 303, random code information detection unit 304, and user login determination unit 305 can all be controlled by a central processing unit ( CPU, Central Processing Unit), microprocessor (MPU, Micro Processor Unit), digital signal processor (DSP, Digital Signal Processor), or Field Programmable Gate Array (FPGA, Field Programmable Gate Array); the random code The generating unit 306, the login request sending unit 307, and the random code information sending unit 308 can all be implemented by CPU, MPU, DSP, or FPGA on the mobile terminal.

In order to implement the above method, an embodiment of the present invention also provides a mobile terminal client identity authentication system, as shown in Figure 4, the system includes: a mobile terminal client, a server, and a third-party device; wherein,

The mobile terminal client is used to generate a random code according to the login information input by the user; it is also used to send a login request whose content is the user login account and password to the server, and send an information request whose content is a random code to said third party device;

The server is configured to bind the user login account with the mobile terminal number; after receiving the login request, verify the login information including the user login account and password, and after the verification is passed, obtain the account corresponding to the user login account. Determine the mobile terminal number; detect whether the third-party device receives the information that the content sent by the mobile terminal number is a random code, and determine whether to allow the user to log in according to the detection result;

The third-party device is configured to respond to the information request, and notify the mobile terminal client to send information whose content is a random code to the server.

Here, the mobile terminal client is specifically configured to: use DSA to generate a random code, wherein the DSA is at least one of asymmetric encryption algorithms.

Here, the third-party device is determined according to the sending form of the information whose content is a random code, for example: when the information is sent in the form of a short message by calling a mobile terminal such as a mobile phone short message gateway sending service, the third party The device is a short message gateway; when the information is sent in the form of a multimedia message by calling a multimedia gateway to send the service, the third-party device is a multimedia message gateway; when the information is sent in the form of a WeChat by calling a WeChat gateway, the third party The device is a WeChat gateway, which is not specifically limited here.

As shown in Figure 4, the mobile terminal client includes: a random code generating unit 402, a login request sending unit 403, a random code information sending unit 404, and a verification result accepting unit 409; the server includes: an account number binding unit 401. Login information verification unit 405, binding number acquisition unit 406, random code information detection unit 407, verification result feedback unit 408; wherein,

The account number binding unit 401 is used to bind the user login account with the mobile terminal number;

The random code generation unit 402 is configured to generate a random code by the mobile terminal client according to the login information input by the user;

The login request sending unit 403 is configured to, after the random code generating unit 402 generates a random code, send a login request whose content is the user login account number and password to the server by the mobile terminal client;

The random code information sending unit 404 is configured to send an information request whose content is a random code to a third-party device after the random code generation unit 402 generates the random code; the third-party device responds to the information request and notifies The mobile terminal client sends information whose content is a random code to the server;

The login information verification unit 405 is configured to verify the login information including the user login account and password after receiving the login request;

The binding number obtaining unit 406 is configured to obtain the mobile terminal number correspondingly bound to the user login account after the login information verification unit 405 passes the verification;

The random code information detection unit 407 is configured to detect whether the third party device has received information that the content sent by the mobile terminal number is a random code;

The verification result feedback unit 408 is configured to send the detection result to the mobile terminal client;

The verification result accepting unit 409 is configured to confirm the legitimacy of the user's identity according to the feedback detection result, so as to decide whether to allow the user to log in.

In the embodiment of the present invention, the user login account is bound to the mobile phone number; after receiving the login request, the login information including the user login account and password is verified, and after the verification is passed, the mobile terminal correspondingly bound to the user login account is obtained number; detect whether the information sent by the mobile terminal number is a random code, and determine whether to allow the user to log in according to the detection result; wherein, the random code is generated according to the login information. The embodiment of the present invention only needs to establish the binding relationship between the mobile terminal number and the user login account, which improves the portability and convenience of the application program of the mobile terminal client; in addition, the identity authentication steps of the mobile terminal client are static verification and The combination of dynamic verification, that is: the use of double authentication; in this way, it can not only ensure that the mobile terminal client logged in by the user is consistent with the mobile terminal client used by the user to bind the mobile terminal number, but also solve security vulnerabilities such as forged signatures and password cracking , greatly improving the security of user information.

In addition, the embodiment of the present invention does not require the user to receive the invitation code, and the background gateway can automatically and intelligently complete the authentication of the user's login identity through a third-party device, reducing user operation steps, shortening the authentication time, and bringing better use to users. experience.

Those skilled in the art should understand that the embodiments of the present invention may be provided as methods, systems, or computer program products. Accordingly, the present invention can take the form of a hardware embodiment, a software embodiment, or an embodiment combining software and hardware aspects. Furthermore, the present invention may take the form of a computer program product embodied on one or more computer-usable storage media (including but not limited to disk storage and optical storage, etc.) having computer-usable program code embodied therein.

The present invention is described with reference to flowchart illustrations and/or block diagrams of methods, apparatus (systems), and computer program products according to embodiments of the invention. It should be understood that each procedure and/or block in the flowchart and/or block diagram, and a combination of procedures and/or blocks in the flowchart and/or block diagram can be realized by computer program instructions. These computer program instructions may be provided to a general purpose computer, special purpose computer, embedded processor, or processor of other programmable data processing equipment to produce a machine such that the instructions executed by the processor of the computer or other programmable data processing equipment produce a An apparatus for realizing the functions specified in one or more procedures of the flowchart and/or one or more blocks of the block diagram.

These computer program instructions may also be stored in a computer-readable memory capable of directing a computer or other programmable data processing apparatus to operate in a specific manner, such that the instructions stored in the computer-readable memory produce an article of manufacture comprising instruction means, the instructions The device realizes the function specified in one or more procedures of the flowchart and/or one or more blocks of the block diagram.

These computer program instructions can also be loaded onto a computer or other programmable data processing device, causing a series of operational steps to be performed on the computer or other programmable device to produce a computer-implemented process, thereby The instructions provide steps for implementing the functions specified in the flow chart or blocks of the flowchart and/or the block or blocks of the block diagrams.

The above description is only a preferred embodiment of the present invention, and is not used to limit the protection scope of the present invention. Any modifications, equivalent replacements and improvements made within the spirit and principles of the present invention shall be included in the within the protection scope of the present invention.

Claims (10)

1. A mobile terminal client identity authentication method is characterized in that, the user login account is bound with the mobile terminal number; the method also includes: After receiving the login request, verify the login information including the user login account and password, and obtain the mobile terminal number correspondingly bound to the user login account after the verification is passed; Detect whether the information sent by the mobile terminal number is a random code, and determine whether to allow the user to log in according to the detection result; Wherein, the random code is generated according to the login information. 2. The method according to claim 1, wherein the random code is generated by the mobile terminal client according to the login information input by the user; After generating the random code, the method further includes: sending, by the mobile terminal client, a login request whose content is the user login account and password to the server, and sending an information request whose content is the random code to a third-party device; The third-party device responds to the information request, and notifies the mobile terminal client to send information whose content is a random code to the server. 3. The method according to claim 1 or 2, wherein said generating a random code comprises: using a digital signature algorithm DSA to generate a random code, wherein said DSA is at least one of asymmetric encryption algorithms. 4. The method according to claim 2, wherein the determining whether to allow the user to log in according to the detection result comprises: Monitor from the third-party device whether there is information that the content sent by the mobile terminal number correspondingly bound to the user login account is random code information, and if so, feed back the monitoring result to the mobile terminal client to determine the user's If the identity authentication is passed, the user is allowed to log in; otherwise, the monitoring result is fed back to the mobile terminal client to determine that the user's identity authentication has not passed, and the user is not allowed to log in. 5. A mobile terminal client identity authentication device, characterized in that the device includes: an account number binding unit, a login information verification unit, a binding number acquisition unit, a random code information detection unit, and a user login determination unit; wherein , The account number binding unit is used to bind the user login account with the mobile terminal number; The login information verification unit is configured to verify the login information including the user login account number and password after receiving the login request; The binding number obtaining unit is configured to obtain the mobile terminal number correspondingly bound to the user login account after the login information verification unit passes the verification; The random code information detection unit is used to detect whether the information sent by the mobile terminal number is a random code; The user login determination unit is configured to determine whether to allow user login according to the detection result of the random code information detection unit; Wherein, the random code is generated according to the login information. 6. The device according to claim 5, further comprising: a random code generating unit, a login request sending unit, and a random code information sending unit; wherein, The random code generation unit is used to generate a random code by the mobile terminal client according to the login information input by the user; The login request sending unit is configured to send, by the mobile terminal client, a login request whose content is the user login account number and password to the server after the random code generation unit generates the random code; The random code information sending unit is configured to send an information request containing a random code to a third-party device after the random code generating unit generates the random code; the third-party device responds to the information request and notifies the The mobile terminal client sends information containing random codes to the server. 7. The device according to claim 5 or 6, wherein the random code generating unit is specifically configured to: use a digital signature algorithm DSA to generate a random code, wherein the DSA is at least one of the asymmetric encryption algorithms A sort of. 8. The device according to claim 6, wherein the user login determination unit is specifically configured to: Monitor from the third-party device whether there is information that the content sent by the mobile terminal number correspondingly bound to the user login account is random code information, and if so, feed back the monitoring result to the mobile terminal client to determine the user's If the identity authentication is passed, the user is allowed to log in; otherwise, the monitoring result is fed back to the mobile terminal client to determine that the user's identity authentication has not passed, and the user is not allowed to log in. 9. A mobile terminal client identity authentication system, characterized in that the system includes: a mobile terminal client, a server, and a third-party device; wherein, The mobile terminal client is used to generate a random code according to the login information input by the user; it is also used to send a login request whose content is the user login account and password to the server, and send an information request whose content is a random code to said third party device; The server is configured to bind the user login account with the mobile terminal number; after receiving the login request, verify the login information including the user login account and password, and after the verification is passed, obtain the account corresponding to the user login account. Determine the mobile terminal number; detect whether the third-party device receives the information that the content sent by the mobile terminal number is a random code, and determine whether to allow the user to log in according to the detection result; The third-party device is configured to respond to the information request, and notify the mobile terminal client to send information whose content is a random code to the server. 10. The system according to claim 9, wherein the mobile terminal client is specifically configured to: use a digital signature algorithm DSA to generate a random code, wherein the DSA is at least one of an asymmetric encryption algorithm .